Threats tagged 'ghsa-pqvc-9q7p-f55r'

The Dynific Addons for Elementor WordPress plugin (formerly Anywhere Elementor) contains a vulnerability allowing unauthenticated attackers to execute arbitrary shortcodes. This affects all versions up to and including 1.3.0. Exploitation requires that the target site has a public post rendered through an AE template including the AE Post Comments widget, and that the attacker's comment is visible on that page, which typically requires a previously approved comment or relaxed comment moderation.